Solved

What's the difference between Domain Controller Security Settings and Domain Security Settings?

Posted on 2007-12-04
6
1,956 Views
Last Modified: 2012-06-27
What's the difference between Domain Controller Security Settings and Domain Security Settings?
0
Comment
Question by:AnimatorOne
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 12

Accepted Solution

by:
bhnmi earned 300 total points
ID: 20406816
One is for the Domain Controllers and the other is domain wide.
0
 
LVL 38

Assisted Solution

by:Shift-3
Shift-3 earned 200 total points
ID: 20406851
Domain Security Settings affect every computer in the domain.  Domain Controller Security Settings only affect machines in the Domain Controllers OU.

Keep in mind that Account Policies (password, lockout, and kerberos settings) must be set at the domain level.  They have no effect if set on a site or OU.

Group Policy is a big and complicated topic.  Here is an introduction:
http://www.microsoft.com/windowsserver2003/techinfo/overview/gpintro.mspx
0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 20406867
I am not sure where you see the two, meaning Domain Security and Domain Controller Security, to draft this question? But, it sounds like you are trying to figure out the Domain controller's settings in comparison to the Default Domain Group policy settings.

The domain controller's settings should be one domain controller, when the domain security settings will interact with all domain controllers and clients on your domain.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 38

Expert Comment

by:ChiefIT
ID: 20406871
Looks like we were all drafting the answer at the same time. Sorry about the redundancy.
0
 

Author Comment

by:AnimatorOne
ID: 20406877
So if you set a DC Permision, it will replicate to other DCs only and if you set the Domain permission it goes out to every PC, Server etc on the domain?
0
 

Author Closing Comment

by:AnimatorOne
ID: 31412695
Thank you!
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question